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(54) Signal recording and reproduction and signal record media 



(57) A signal reproducing apparatus, in which unau- 
thorized decoding or copying is rendered difficult, repro- 
duces enciphered data from a disk-shaped record me- 
dium (101) on which are recorded data enciphered by 
at least one encryption operation and key storage site 
information specifying an arraying site for at least one 
key information item used for deciphering the enci- 
phered data. The apparatus includes a reproducing 
head device (212) for reading the enciphered data and 
the key storage site information from the record medium 
(101), a TOC decoder (219), a CPU (224) and a digital 
signal processing circuit (220) for decoding the enci- 
phered data using the key information stored on the site 
designated in accordance with the key storage site in- 
formation. 




Printed by Jouw. 75001 PARIS (FR) 



1 



EP0 756 279 A2 



2 



Description 

This invention relates to signal recording apparatus, 
signal record (recording, recordable or recorded) media 
and signal reproducing apparatus. 

Recently, with increased capacity and coming into 
widespread use of digital recording media, such as op- 
tical discs, prohibition of duplication or unauthorized use 
thereof has become incumbent for protecting the copy- 
right of recorded signals. That is, digital audio data or 
digital video data can be duplicated by copying or dub- 
bing without deterioration, while computer data can be 
duplicated to give data which are the same as the orig- 
inal data, so that troubles are caused due to unauthor- 
ized copying. 

With this in view, a pre-set ID bit for preventing un- 
authorized copying is occasionally recorded on an orig- 
inal signal record medium for prohibiting unauthorized 
copying. 

For example, in a system for prohibiting the unau- 
thorized copying in a digital audio data recording/repro- 
ducing apparatus termed a rotary head digital audio 
tape recorder (R-DAT), an inhibiting code for inhibiting 
digital copying or generation-serial copying, that is for 
generation limitation (inhibiting code of a standard of the 
serial copying management system or SCMS) is record- 
ed in a main data area for digital audio signals recorded 
on a digital audio tape as a signal record medium, so 
that, when the inhibiting code is detected by the digital 
audio signal recording apparatus, copying recording of 
the digital audio signals on a new digital audio tape is 
inhibited. 

For preventing unauthorized copying of, for exam- 
ple, digital audb video signals recorded on a signal 
record medium, an ID bit for prevention of unauthorized 
copying (copy generation management system or 
CGMS) may be recorded on an original digital record 
medium, as in the case of the above-mentioned system 
for prevention of unauthorized copying between R-DAT 
recording/reproducing apparatus. 

In the case of the computer data, it has been prac- 
ticed to cipher the file contents themselves, using the 
encryption key information, and to permit it to be used 
only by the regular registered users. This system is re- 
lated with a system in which digital recording media hav- 
ing recorded thereon the ciphered information are dis- 
tributed as a form of information circulation and the user 
may acquire the key information on payment for the con- 
tents he or she requires to decipher and use the file con- 
tents. 

However, the conventional inhibiting code or the en- 
cryption key information as described above is recorded 
in a particular location on the record medium which is 
proper to the system and which is accessed by the user, 
as disclosed in Japanese Patent Application Publication 
No. JP-A-5-173891 (1993). Meanwhile, the inhibiting 
codes or the encryption key information is also usually 
ciphered. 



If the inhibiting code or the encryption key informa- 
tion is fixedly arrayed at an arbitrary position from one 
encryption technique to another, there is a risk of loss 
of interchangeability. In addition, if the inhibiting code or 
s the encryption key information is fixedly arrayed, the en- 
cryption technique is fixed and becomes poor in flexibil- 
ity and extendibility, while the service life of the format 
itseff tends to be diminished. 

Also the encryption key information or the inhibiting 
code is located at a position accessible by the user, so 
that it may be decoded or illicitly copied by a knowledge- 
able user. 

Preferred embodiments of the invention described 
hereinbelow seek to overcome the above inconven- 
ience by providing a signal recording apparatus, a signal 
record (recording, recordable or recorded) medium and 
a signal reproducing apparatus in which copying or un- 
authorized use is prohibited or at least rendered difficult. 
Specifically, the prepared embodiments provide such a 
recording apparatus and record medium in which a ci- 
phered signal corresponding to a ciphered input signal 
and key storage position information specifying an en- 
cryption key information arraying position are recorded 
on the signal record medium. 

Respective aspects of the invention are set forth in 
claims 1, 5 and 8 hereof. 

With a signal recording apparatus and signal record 
medium according to preferred embodiments of the in- 
vention as described below, a ciphered input signal and 
key storage site information specifying an arraying site 
for encryption key information are recorded on a signal 
record medium. 

With a signal reproducing apparatus according to a 
preferred embodiment of the invention described below, 
in reproducing signals from the signal record medium 
the ciphered signal and the key storage site information 
are read out from the signal record medium, and the ci- 
phered signal is deciphered using the key information 
stored on the site designated by the key storage site in- 
formation. 

Thus, by recording the key storage site information 
on the signal record medium for specifying the site of 
the key information, and taking out the key information 
for signal reproduction based on the key storage site in- 
formation on the occasion of signal reproduction, the 
key information can be taken out only with considerable 
difficulties. 

Since the key storage site information specifying 
the site of the key information is recorded on the signal 
record medium, and the key information taken out on 
the basis of the key storage site information on the oc- 
casion of signal reproduction, it becomes possible to 
prohibit unauthorized decoding or copying. 

The invention will now be further described, by way 
of illustrative and non limiting example, with reference to 
the accompanying drawings, in which: 

Fig. 1 is a block circuit diagram showing an embod- 
iment of a signal recording apparatus according to the 
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present invention. 

Fig. 2 is a block diagram showing an embodiment 
for realization of even and odd byte interleaving in a sec- 
tor forming circuit. 

Fig.3 illustrates an even and odd byte interleaving, s 

Fig.4 is a circuit diagram showing a scrambler. 

Fig.5 illustrates scrambler pre-set values. 

Fig.6 illustrates a scrambler with variable generat- 
ing polynomials. 

Fig.7 shows an example of a sector format. 

Fig. 8 illustrates an example of encryption in a syn- 
chronization area in a sector. 

Fig. 9 illustrates an example of a header area in a 
sector. 

Fig. 10 illustrates an example of an error correction 
encoding circuit. 

Fig. 11 illustrates another example of an error cor- 
rection encoding circuit. 

Fig. 12 illustrates an example of encryption per- 
formed by a modulation circuit. 

Fig. 13 illustrates an example of a synchronization 
word appended to a modulated signal. 

Fig. 1 4 illustrates an example of encryption by a syn- 
chronization appendage circuit. 

Fig. 15 illustrates a data record medium. 

Fig. 1 6 is a block circuit diagram showing an embod- 
iment of a signal reproducing apparatus according to the 
present invention. 

Fig. 1 7 is a block circuit diagram showing an embod- 
iment of a digital signal processing circuit of the signal 
reproducing apparatus shown in Fig. 16 

Fig. 1 8 illustrates a table for the key storage position 
information. 

Fig.1 9 illustrates an example of encryption by a de- 
modulation circuit. 

Fig. 20 illustrates an example of an error correction 
decoding circuit. 

Fig.21 illustrates another example of an error de- 
coding circuit. 

Fig. 22 illustrates an example of a descrambling cir- 
cuit. 

Fig.23 illustrates another example of a descram- 

bler. 

Fig.24 illustrates an example of pre-set values of 
the scrambler shown in Fig.21. 

Fig. 25 shows another example of a sector format. 

Fig. 26 illustrates an example of a header area in a 
sector in the sector format of Fig.23. 

Fig.27 illustrates another example of an error cor- 
rection encoding circuit. 

Fig. 28 illustrates a product code as an embodiment 
of an error correction code. 

Fig. 29 illustrates an example of a sector signal for- 
mat. 

Figs.30A 30B illustrates other examples of the syn- 
chronization word appended to the modulated signal. 

Fig.31 illustrates another example of encryption by 
a synchronization appendage circuit. 



Fig. 32 is a block diagram showing another example 
of an error correction decoding circuit. 

Referring to the drawings, preferred embodiments 
of the present invention will be explained in detail. 

Fig. 1 shows, in a schematic block diagram, an em- 
bodiment of a signal recording apparatus embodying 
the present invention. 

Referring to Fig.1 , digital data, such as data con- 
verted from analog audio signals or video signals by A/ 
D conversion, or computer data, are supplied to an input 
terminal 11 . The input digital data is sent via an interfac- 
ing circuit 12 to a sector forming circuit 13 so as to be 
formed into sectors each made up of 2048 bytes as a 
unit. 

The data formed into sectors are sent to a scram- 
bling circuit 14 for scrambling. The scrambling herein 
means randomization of input data for preventing the 
same byte pattern from appearing continuously, that is 
for removing the same pattern, for enabling proper sig- 
nal reading and writing. 

The scrambled or randomized data is sent to a 
header appendage circuit 15 where header data is ap- 
pended to a leading end of each sector. The resulting 
data is sent to an error correction encoding circuit 16. 

The error correction appendage circuit 16 performs 
data delaying and parity calculations for appendage of 
parity data. 

A modulation circuit 17 of the next stage converts 
8-bit data, for example, into 16 channel bit modulated 
data in accordance with a pre-set modulation rule and 
sends the resulting modulated data to a synchronization 
appendage circuit 18. 

The synchronization appendage circuit 18 appends syn- 
chronization signals of a so-called out-of-rule pattern in 
terms of a pre-set data volume as a unit and sends the 
resulting data via a driving circuit, that is a driver 1 9, to 
a recording head 20. 

The recording head 20 effects optical or photo-mag- 
netic recording and records the modulated recording 
signals on a disc-shaped record(recording .recordable 
or recorded) medium 21 . This disc-shaped record me- 
dium 21 is run in rotation by a spindle motor 22. 

The scrambling circuit 14 is not essential and may 
also be inserted downstream of the header appendage 
circuit 15 for scrambling the digital data with the header 
appended thereto and for sending the scrambled data 
to the error correction coding circuit 16. 

At least one of the sector formation circuit 13, 
scrambling circuit 14, header appendage circuit 15, er- 
ror correction encoding circuit 16, modulation circuit 17 
and the synchronization appendage circuit 18 is config- 
ured for ciphering the input signal and outputting the re- 
sulting ciphered signal. Preferably, such encryption is 
performed in two or more circuits. 

The key information for encryption may use, at least 
in a portion thereof, the identification information, such 
as the production number proper to a particular record 
medium, producer identification number, seller ktenttfi- 
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cation number, identification information proper to a par- 
ticular recording apparatus or a particular encoder, or 
the identification information proper to a particular de- 
vice for producing the recording media, such as a cutting 
machine or a stamper, or the identification information 
supplied from outside. The input data is ciphered in at 
least one and desirably in two or more of the circuits 1 3 
to 18, using the key information. 

Which of the circuits 1 3 to 18 has done the encryp- 
tion also represents one of alternatives and is thought 
to be the key required for producing the regular repro- 
duction signal during reproduction. That is, if encryption 
is done in one of the circuits, it becomes necessary to 
select one of six alternatives, whereas, if encryption is 
done in two of the six circuits, it becomes necessary to 
select one of thirty alternatives. If there is a possibility 
of performing the encryption at one to six of the six cir- 
cuits 13 to 18, the number of alternatives is increased 
further, such that it becomes difficult to find the combi- 
nations by a trial-and error method. Thus the purpose 
of encryption can be met satisfactorily. 

The key information for encryption may also be 
switched at a pre-set timing, for example, at a sector 
period. If the key information is switched at this pre-set 
timing, the information as to whether or not switching is 
performed, switching period or the switching sequence 
of plural items of the key information, may also be used 
as the key for further raising the level of encryption and 
ciphering or deciphering difficulties. 

The above key information is stored in a location on 
the record medium as specified by the encryption key 
storage site information as later explained by using the 
recording head 20. Also , as other embodiment, the 
above key information is written in a location on the 
record medium by using bar codes', wobbling or ultravi- 
olet rays. Further, as other embodiment, the above key 
information is stored in a location other than positions 
on the record medium 101 and key information is pro- 
vided the reproucing apparatus as later explained. The 
key storage site information is the information transmit- 
ted from, for example, the interfacing circuit 1 2 via a ta- 
ble-of -contents (TOC) generating circuit 23 to a terminal 
2, or the information directly sent from the interfacing 
circuit 1 2 to the terminal 25. These items of the key stor- 
age site information are recorded in a TOC area or other 
pre-set sites of the record medium 101 by using the re- 
cording head 20. In the following explanation, the key 
storage site information is recorded in the TOC area. 

The structure of the circuits 13 to 18 and illustrative 
examples of the ciphering operations are now ex- 
plained. 

First, even byte/odd byte interleaving may be car- 
ried out in the sector forming circuit 1 3, as shown in Fig. 
2. That is, in Fig.2, an output of the interfacing circuit 12 
of Fig.2 is sent to a two-output changeover switch 31 , 
an output of which is sent via an even/odd interleaver 
33 to a sector forming circuit 34 and the other output of 
which is directly sent to a sector forming circuit 34. The 



sector forming circuit 34 groups 2048 bytes, for exam- 
ple, of the input data in one sector. The switching of the 
changeover switch 32 of the sector formation circuit 13 
is controlled by the one-bit control signal operating as a 
s key for switching. The even/odd interleaver 33 distrib- 
utes one-sector input data, in which even-numbered 
bytes 36a and odd-numbered bytes 36b are arrayed al- 
ternatively, as shown in Fig.3A, in an even data portion 
37a and in an odd data portion 37b, as shown in Fig.3B, 
and outputs the resulting data. It is also possible to des- 
ignate only a pre-set area 39 in a sector by the key in- 
formation and to distribute only data in this area 39 in 
an even data portion 39a and in an odd data portion 39b. 
In the latter case, plural areas such as the area 39 may 
be selectively set for further increasing the alternatives 
of the key information for further raising the level of en- 
cryption. 

As the scrambling circuit 14, a so-called parallel 
block synchronization type scrambler employing a 
15-bit shift register may be employed, as shown for ex- 
ample in Fig. 4. To a data input terminal 35 of the scram- 
bler is entered data from the sector forming circuit 13 in 
an LSB first sequence, that is in a sequence in which 
the least significant bit is entered temporally first. The 
scrambling circuit 14 includes a 1 5-bit shift register 14a 
for scrambling for which feedback is applied in accord- 
ance with a generating polynomial x 1 5 + x + 1 , using an 
exclusive OR (ExOR) circuit 14b. Pre-set values or initial 
values as shown in Fig. 5 are set in the 15-bit shift reg- 
ister 14a. The selection numbers for the pre-set values 
of Fig.5 are associated with, for example, the lower four 
bits of the sector addresses, so that the pre-set values 
will be switched on the sector basis. Output data of the 
shift register 14a and input data from a terminal 35 are 
ExORed by the ExOR circuit 14c, an output of which is 
sent via a terminal 14d to the header appendage circuit 
15 of Fig.1. 

The generating polynomial and the pre-set values 
(initial values) may be varied depending on the key in- 
formation, such as the pre-set identification numbers. 
The generating polynomial may be varied by an ar- 
rangement shown in Fig.6, in which bit outputs of the 
15-bit shift register 14a are sent to respective selection 
terminals of the changeover switch 14f controlled in turn 
by, for example, 4-brt control data from a control terminal 
14g. An output of the changeover switch 14f is sent to 
the ExOR circuit 14b. The value of n of the generating 
polynomial x 15 + x" + 1 may be changed by changing 
the value of the control data of the control terminal 14g. 
For varying the pre-set values, logical operations may 
be executed between respective pre-set values of the 
table shown in Fig.5 with respective byte values of, for 
example, 16-byte identification information. The identi- 
fication information may include the identification infor- 
mation proper to the record medium, the producer iden- 
tification information, seller identification information, 
the identification information proper to the recording ap- 
paratus or the encoder, or the identification information 
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supplied from outside, alone or in combination. These 
information items may also be used in combination with 
other information items. The logical operations may be 
enumerated by ExOR, AND, OR and bit shifting. The 
configuration for varying the generating polynomial is 
not limited to the configuration of Fig.6. For example, 
the number of stages or taps of the shift register may be 
changed in any desired manner. 

The header appendage circuit 1 5 is now explained. 

An illustrative example of the sector format is shown 
in Fig.7 P in which a sector is made up of a 2048 byte 
user data area 41 to which are appended a 4-byte syn- 
chronization area 42, a 16-byte header area 43 and a 
4-byte error detection code (EDC) area 44. The error 
detection code of the error detection code area 44 is 
made up of 32-bit CRC code generated for the user data 
area 41 and the header area 43. Encryption in the head- 
er appendage circuit 15 may include that for the syn- 
chronization data, that is data sync, header address and 
tor CRC. 

As an example of encryption for the data synchro- 
nization or data sync, if the byte patterns allocated to 
respective bytes of the 4-byte synchronization area 42 
are represented by A, B, C and D in Fig.8, the 4-byte 
contents may be shifted or rotated using the 2-bit key 
information. Specifically, by switching to "ABCD\ "BC- 
DA", "CDAB" or to "DABC" for the 2-bit key of "0", "1", 
■2" or '3', sector synchronization cannot be engaged if 
these is no key registration, such that regular reproduc- 
tion cannot be realized. As the byte patterns A to D, 
character codes of, for example, IS0646 may, for exam- 
ple, be employed. 

In the header area 43, there are areas such as an 
area of CRC 45, which is a so-called cyclic code, an area 
for copying information 46, such as copy permit/not per- 
mit or copying generation management, a layer 47 spec- 
ifying one of multiple layers of a multi-layer disc, an ad- 
dress area 48 and a spare area 49, as shown in Fig.9. 
Of these, the address area 48 may be bit-scrambled, in 
which case encryption may be performed by bit-based 
transposition. If, in the generating polynomial for CRC 
45, x 16 + x 15 + x 2 + 1 is used, 15 bits corresponding to 
x 1 5 to x may be changed in place of the second and third 
terms x 15 and x responsive to the key. Alternatively, log- 
ical operations may be executed on the 16 bits of the 
CRC 45 and the key information. 

For the key information, the identification informa- 
tion proper to the record medium, the producer identifi- 
cation information, seller identification information, the 
identification information proper to the recording appa- 
ratus or encoder, or the identification information sup- 
plied from outside, may be used alone or in combination. 
These information items may also be used in combina- 
tion with other information items. 

Referring to Fig.1 0, an illustrative structure of the 
error correction encoding circuit 16 is explained. 

Referring to Fig.1 0, each frame for error correction 
coding is made up of 148 bytes or 148 symbols. The 



digital data from the header appendage circuit 15 is 
grouped in terms of 1 48 bytes as a unit and sent to a C1 
encoder 52 as a first encoder. The C1 encoder 52 ap- 
pends 8-byte P -parity and the resulting data is supplied 

s via a delay circuit 53 for interleaving to a C2 encoder 54 
as a second encoder. The C2 encoder 54 appends 
1 4-byte Q-parity which is returned to the C1 encoder 52 
via a delay circuit 55. From the C1 encoder 52, 170-byte 
data inclusive of the P -parity and the Q-parity is output- 

10 ted and supplied via a re-arraying circuit 57 having in- 
verters 57a to the modulation circuit 17 of Fig.1 . 

For encryption in the error correction coding circuit 
as described above, selection as to whether an inverter 
should be inserted responsive to the key information for 

is encryption may be made for each byte in the inverters 
57a of the re-arraying circuit 57. That is, in the basic 
arrangement, 22 bytes of the P parity and Q parity are 
inverted by the inverters of the re-arraying circuit 57, 
however, some of these inverters may be removed or 

20 several inverters may be inserted on the C1 data side 
before outputting the data. 

In carrying out such data conversion, the probability 
of error correction infeasibility is changed depending on 
the degree of difference from the reference structure, 

25 such that, if the difference is small, the probability of er- 
ror occurrence is only slightly higher, whereas, if the dif- 
ference is large, the error correction is decreased on the 
whole such that reproduction becomes almost infeasi- 
ble. As for the C1 encoder, the distance as an index of 

30 the error correction ability is 9, so that error detection 
and correction is feasible up to the maximum of 4 bytes, 
and should there be an erasure point, error detection 
and correction is feasible up to the maximum of eight 
bytes. Therefore, if there are five or more distances, er- 
as ror correction always becomes infeasible or results in 
mistaken correction with the C1 code. If there are four 
distances, a delicate situation arises that correction be- 
comes impossible if there occurs even another one-byte 
error. As the difference is decreased from three through 

40 two to one, the probability of error correction feasibility 
is increased. If this is used, the playback state in which 
reproduction is possible to a certain extent but is not im- 
peccable and occasionally disturbed, may be positively 
created when furnishing the audio or video software. 

4S This playback state can be used for usage of apprising 
the user of the outline of the software. 

In this case, there are such a method in which two 
inverter change positions, for example, are prescribed, 
a method in which the change points are selected at ran- 

so dom responsive to the key information and the minimum 
number is limited to two and a method consisting in the 
combination of these two methods. 

The inverter insertion position or the inverter chang- 
ing position is not limited to that of the re-arraying circuit 

55 57 in Fig. 1 0. For example, the inverter insertion position 
or the inverter changing position may be upstream and/ 
or downstream of the C1 encoder 52. If there are plural 
such position, different keys may also be used. Bit ad- 
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ditkxi or a variety of logical operations may also be used 
in place of using the inverters. A variety of ciphering 
techniques, such as conversion by shift registers or var- 
ious function operations may also be applied alone or 
in combination. 

Fig. 11 shows another illustrative example of the er- 
ror correction encoding circuit 16 in which a set of ex- 
clusive-OR (Ex-OR) gates 61 are inserted downstream 
of the inverters 57a in the re-arraying circuit 57 while 
another set of exclusive-OR (Ex-OR) gates 66 are in- 
serted upstream of the C1 encoder 52. 

Specifically, the ExOR gates 62 perform data con- 
version by ExOR on 170 byte data taken out from the 
C1 encoder 52 via the delay circuit 56 and the inverter 
57a of the re-arraying circuit 57, that is information data 
C1 izo^iag t° c1 i?on + 22 and parity data P1 170n+ 2i to 
P1iA + i4 and Q1 170n+ i3 to Q1 170n , while the ExOR 
gates 66 perform data conversion by ExOR on 1 48 byte 
input data B 146n to B 145n+147 by ExOR conversion. The 
ExOR gates used in these sets of the ExOR gates 61 , 
66 are 8-bit ExOR gates for ExORing one-byte or B-bit 
input data and pre-set 8-bit data specified by one-bit 
control data. 170 and 148 of such ExOR gates are used 
in the set of the Ex-OR gates 61 and the set of the Ex- 
OR gates 66, respectively. If the pre-set B-brt data are 
all 1, the Ex-OR gates correspond to inverter circuits. 

In Fig.11, 170 bits of the key information are sup- 
plied to a terminal 62, so as to be supplied by a D-latch 
circuit 63 to each of 170 ExOR gates within the set of 
ExOR gates 61 . The D-latch circuit 63 is responsive to 
the 1 -bit ciphering control signal supplied to an enabling 
terminal 64 for switching between sending the 170-bit 
key information from the terminal 62 directly to the set 
of ExOR gates 61 and setting all of the 1 70 bits to zero. 
The ExOR gates of the 170 ExOR gates of the set of 
ExOR gates 61 supplied with "0"s from the D-latch gate 
63 directly output the data from the inverters 57a in the 
re-arraying circuit 57, while the ExOR gates of the set 
of ExOR gates 61 supplied with Ts from the D-latch 
gate 63 invert the data from the inverters 57a in the re- 
arraying circuit 57 and output the inverted data. In case 
of all-zeros, data from the inverters 57a in the re-array- 
ing circuit 57 are outputted directly. The set of ExOR 
gates 66 is similar to the set of ExOR gates 61 except 
having 149 ExOR gates and 148 bits of the key infor- 
mation. Thus the 148-bit key information supplied to a 
terminal 67 is sent via a D-latch circuit 68 to 148 ExOR 
gates in the set of ExOR gates 66, while the D-latch cir- 
cuit 68 is switched by an encryption control signal at an 
enabling terminal 69 between the 148-bit key informa- 
tion and all zeros. 

In the embodiment of Fig. 1 1 , the set of ExOR gates 
61 performs data conversion by ExOR on information 

C1 170n + 169 to C1 170n + 22 and Pa ritV P1 170n + 21 

to P1i 7 orHi4 and Q1 l70a+13 to Q1 170n , as 170-byte data 
taken out from the C1 encoder 52 via the delay circuit 
56 and inverters 57a. It is however possible that data 
conversion on the parity data be not performed and that 



data conversion responsive to the 148-bit key informa- 
tion be performed on the remaining 1 48 byte information 
data C 1 ! 70r>+1 eg to C 1 ! 70n+22 

Of course, the operation and effect similar to the cir- 

s cuit of Fig. 1 0 may be realized. Alternatively, only one of 
the sets of ExOR gates 61 , 66 may be used, or the se- 
lection of one or both of the ExOR gates 61 , 66 may be 
used as the key for encryption. 

For the key information, the identification informa- 

10 tion proper to the record medium, the producer identifi- 
cation information, seller identification information, the 
identification information proper to the recording appa- 
ratus or the encoder, or the identification information 
supplied from outside, may be used alone or in combi- 

15 nation, while these information items may also be used 
in combination with other information items, as dis- 
cussed above. 

It is also possible to use AND, OR, NAND, NOR or 
inverter circuits in place of the sets of the ExOR gates 

2Q as data conversion means. Also, logical operations may 
also be performed on the 8-bit information data, using 
the S-bit key data, in place of performing logical opera- 
tions on the 8-bit basis using the 1-bit key information 
or key data. Alternatively, the AND, OR, ExOR, NAND, 

25 NOR or inverter circuits may be used in combination 
with respective eight bits corresponding to one word of 
information data. In such case, 1 48 8 bit key data is used 
for 148 byte or 148 8 bit data. If the AND, OR, ExOR, 
NAND, NOR or inverter circuits are used in combination, 

30 the combination rtsetf may be used as the key for en- 
cryption. In addition to logical operations, the transposi- 
tion of changing the data values or data value substitu- 
tion may also be used as the data conversion. Also, a 
variety of encryption techniques, such as conversion by 

■35 a shift register or by a variety of function operations, may 
be applied alone or in combination. 

Referring to Fig. 12, the ciphering operation by the 
modulation circuit 17 of Fig. 1 is explained. In Fig. 12, 
8-bit or 1 -byte based data from the error correction en- 

40 coding circuit 16 is supplied to an input terminal 71 , while 
an 8-bit based key data is supplied to an input terminal 
72. These two sorts of the 8-bit data are sent to an ExOR 
gate 73, as an example of the logical circuit 73, for ExOR 
operation. An 8-bit output of the ExOR gate 73 is sent 

45 to a modulator of a pre-set modulation system, for ex- 
ample, an 8-16 conversion circuit 74, for conversion to 
16 channel-bit data. An example of the 8-16 conversion 
circuit 74 is a so-called EFM plus modulation system. 
Although the encryption by the 8-bit key information 

so is performed before data modulation in the embodiment 
of Fig. 12, the number of bits of the key information is 
not limited to 8 bits. Also, the input/output correspond- 
ence of the conversion table for 8-16 conversion may 
be changed depending on the key information. Of 

55 course, the identification information proper to the me- 
dium may be used as the key information. 

The synchronization appendage circuit 18 is now 
explained. 
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The synchronization appendage circuit 1 8 uses four 
sorts of the synchronization words SO to S3 shown for 
example in Fig. 1 3 for synchronization based on a frame 
of 8-16 modulation as a unit. The 8-16 modulation 
frame, such as the EFM plus frame, is made up of, for 
example, 1 360 channel bits, which are 85 data symbols. 
32 channel-bit synchronization words are appended 
every one frame or 1 360 channel bits. The frame is as- 
sociated with the C1 code and the C2 code for structur- 
ing. On the other hand, the synchronization word of the 
leading frame of the C1 code series is made to differ 
from the synchronization word of other frames for differ- 
ently using the four sorts of the synchronization words 
SO to S3. These synchronization words SO to S3 have 
respective two synchronization patterns a, b depending 
on the states of '0' or "1 ■ of the directly prevbus word, 
digital sum values or dc values. 

The selection of these four sorts of the synchroni- 
zation words SO to S3 is changed responsive to the 2-bit 
key information 75 for encryption, using a circuit shown 
for example in Fig. 14. That is, respective bits of the 2-bit 
data 76 designating the four sorts of the synchronization 
words SO to S3 and respective bits of the 2-bit key in- 
formation 75 are ExORed by two ExOR gates 77, 78 to 
a new synchronization word designation data 79. This 
modifies the manner of using the synchronization word 
in the above frame structure for performing the encryp- 
tion. 

Meanwhile, the number of the sorts of the synchro- 
nization words may be increased further and the manner 
of taking out the four sorts of the synchronization words 
from among these increased sorts of the synchroniza- 
tion words may be determined by the key for encryption. 
As such key information, the identification information 
proper to the medium may be used. 

Fig. 15 shows a disc-shaped record medium 101, 
such as an optical disc, as an example of a record me- 
dium. The disc-shaped record medium 101 has a center 
aperture 102. Looking from the inner rim towards the 
outer rim of the disc-shaped record medium 101 , there 
are formed a lead-in area 103, as a program manage- 
ment region or TOC region, a program area 104 having 
program data recorded therein, and a program end ar- 
ea, or a so-called lead-out area 105. In an optical disc 
for reproducing audio or video signals, the audio or vid- 
eo signals are recorded in the program area 104, while 
the time information or the like for the audio or video 
data is managed by the lead-ion area 103. 

In the record medium 101, the key storage site in- 
formation is recorded in the lead-in area 103 as part of 
the TOC information. For reproduction, the key storage 
site information is read out, and the key information for 
encryption is taken out based on the read out key stor- 
age site information. 

The storage site for the key information, specified 
by the key storage site information, will be explained 
subsequently. 

The reproducing apparatus for reproducing data 



from the disc-shaped record medium 101 is explained 
by referring to Fig. 16. 

In Fig. 16, a disc-shaped record medium 101, as a 
record medium, is run in rotation by a spindle motor 211, 
5 so as to have its recording contents read out by a repro- 
ducing head device 212, such as an optical pickup. 

The signals read out by the reproducing head 212 
are converted by a bi-level forming circuit 21 3 into bi- 
level digital data which is sent to a digital signal process- 
ing circuit 220. Of the digital data, converted by the bi- 
level forming circuit 21 3 into bi-level data, data read out 
from the TOC area is sent to a TOC decoder 21 9 for 
decoding. The resulting decoded data is sent to a CPU 
224. 

The CPU 224 takes out the key storage site infor- 
mation from data from the TOC decoder 21 9. The CPU 
224 takes out the key information, based on the key stor- 
age site information, as later explained, and stores the 
key information in plural encryption key information ac- 
cumulation circuits 222 1 to 222 N . 

The digital signal processing circuit 220 has plural 
decoders 221 1 to 221 N and plural encryption key infor- 
mation accumulation circuits 222 1 to 222 N . The decod- 
ers 22^ to 221 N perform an operation which is the re- 
verse of the operation by the structure from the sector 
forming circuit 1 3 to the synchronization appendage cir- 
cuit 18 shown in Fig.t. That is, if the encryption employ- 
ing the key information is performed in at least one and 
preferably two or more of these circuits 13 to 18, the 
digital signal processing circuit 220 deciphers in the de- 
coders associated with the circuits among the circuits 
13 to 18 involved in ciphering, using he key information 
accumulated in the encryption key information accumu- 
lation circuits 222^ to 222 N . 

Specifically, the digital signal processing circuit 220 
has a structure shown in Fig. 17 in association with the 
decoders 221 , to 221 N Output data of the bi-level form- 
ing circuit 213 is supplied to a terminal 113 of Fig. 17, in 
which a synchronization separation circuit 114 sepa- 
rates the synchronization signal appended in the syn- 
chronization appendage circuit 18 shown in Fig.1. The 
digital signal from the synchronization separation circuit 
114 is sent to a demodulation circuit 114 lor separation 
of the synchronization signal appended by the synchro- 
nization appendage circuit 1B of Fig.1 . The digital signal 
from the synchronization separation circuit 114 is sent 
to a demodulation circuit 115 for effectuating demodu- 
lation which is the reverse operation of the modulation 
performed by the modulation circuit 17 of Fig.1 . Specif- 
ically, the demodulation is an operation of converting the 
16 channel bits into 8 bit data. The digital data from the 
demodulation circuit 115 is sent to an error correction 
decoding circuit 116 for performing a decoding opera- 
tion which is the reverse operation of encoding by the 
error correction encoding circuit 16 of Fig.1 . The decod- 
ed data is resolved into sectors by a sector resolution 
circuit 117 and the header at the leading end of each 
sector is separated by a header separation circuit 118. 
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The sector resolution circuit 117 and the header sepa- 
ration circuit 118 are counterpart devices of the sector 
forming circuit 13 and the header appendage circuit 15 
of Fig.1 , respectively. The resulting data is descrambled 
by a descrambling circuit 119. The d esc rambling is an 
operation which is the reverse of the scrambling per- 
formed by the scrambling circuit 1 4 of Fig. 1 . The result- 
ing output data is outputted at a terminal 1 20 and thence 
supplied to an output terminal 223 of Fig.16. 

If the encryption is done during recording by the 
sector lorming circuit 13 of Fig.1 , the sector resolution 
circuit 117 performs the deciphering using the key infor- 
mation for encryption. Similarly, the deciphering by the 
descrambling circuit 119 is performed in association 
with the encryption performed by the scrambling circuit 
14 of Fig.1, while the deciphering by the header sepa- 
ration circuit 118 is performed in association with the ci- 
phering performed by the header appendage circuit 15 
of Fig.1 . The deciphering by the error correction decod- 
ing circuit 116 is performed in association with the ci- 
phering performed by the error correction encoding cir- 
cuit 16 of Fig.1, while the deciphering by the demodula- 
tion circuit 115 is performed in association with the ci- 
phering performed by the modulation circuit 17 of Fig.1 . 
Finally, the deciphering by the synchronization separa- 
tion circuit 114 is performed in association with the ci- 
phering performed by the synchronization appendage 
circuit 18 of Fig.1. 

The CPU 224 finds the location where the key in- 
formation is actually stored, based on the key informa- 
tion storage site information supplied from the TOC de- 
coder 219, and takes out the key information stored in 
a site corresponding to the key storage site information. 
The CPU 224 causes the key information thus taken out 
to be accumulated in the encryption key information ac- 
cumulation circuits 222, to 222 N , associated with the de- 
coders 221 to 221 N , respectively, and uses the accu- 
mulated key information for performing the decoding. 

To this end, the key storage site information KP^ to 
KP N having the data structure shown in Fig. 18 for each 
of the decoders 22^ to 221 N in the digital signal 
processing circuit 220. The key storage site information 
KPt to KP N is arrayed in the TOC area in the record 
medium 101. 

The key storage site information KP^ to KP N is 
made up of the sector address information, offset infor- 
mation, byte number information and the attribute infor- 
mation, as shown in Fig.1 8. That is, the key storage site 
information KP^ to KP N specifies that the encryption key 
information CK necessary for deciphering by a decoder 
is stored at a position specified by the offset information 
(byte specified by the offset information as from the 
leading byte) in bytes of a length specified by the byte 
number information. Meanwhile, the attribute informa- 
tion may be the information concerning the use or non- 
use of the decoders 221 1 to 221 N or the like information. 

The decoding processing flow in the reproducing 
apparatus of Fig.16 in case of using the key storage site 



information is now explained. 

Each time the disc-shaped recording media 1 01 are 
exchanged, the reproducing apparatus of Fig.16 resets 
all of the decoders 221 1 to 221 N and the encryption key 

s information accumulation circuits 222^o 222 N , while 
setting all sector addresses of the disc-shaped record 
medium 101 to an accessible mode. 

The reproducing apparatus then reads out the key 
storage site information KP 1 to KP N from the TOC area 

10 of the disc-shaped record medium 101 and judges 
whether or not the decoder in subject is being used 
based on the attribute information shown in the entries 
of the decoders 22^ to 221 N in the key storage site in- 
formation KPj to KP N . If the decoder is used, the sector 

15 contents specified in the sector address information as 
the key storage site are read. The case in which special 
addresses are written will be explained subsequently 
The information of a range shown by the offset informa- 
tion and the byte number information is read out from 

20 this sector to take out the encryption key information. 
The encryption key information is then accumulated in 
an encryption key information accumulating unit 222 
and set in the decoder 221 to complete preparation for 
deciphering, that is for expression in plain language. 

25 The above sequence of operations is repeated in all de- 
coders 221, to 221 N . The reproducing apparatus then 
transfers to a user access area limiting mode. 

The reproducing apparatus accepts the user com- 
mand and accordingly reads out user data to solve the 

30 encryption of the user data based on the encryption key 
information accumulated in the encryption key informa- 
tion accumulation unit 222. 

The key information, the storage site therefor and 
the key storage site information will now be explained. 

35 Since the sector addresses specified by the sector 
address information can cover all sectors on the disc- 
shaped record medium 101, if the sector address infor- 
mation is represented in twos complement form with 4 
bytes, and an area used in a system such as TOC area 

*o is in (Offffffffh), the identification information contained 
therein and inherently written for other purposes, such 
as for recording the production hysteresis, may be des- 
ignated as the encryption key information. For example, 
if the production hysteresis information is recorded in 1 6 

45 bytes beginning at the 160th byte as from the leading 
end of the sector in the TOC area, the offset information 
is 160th byte and the byte number information is 16 
bytes, the production hysteresis identification informa- 
tion can be designated accordingly. 

so if a negative value such as (OfffffffOh) is set as the 
sector address, and the encryption key inf ormatiqn writ- 
ten in the user inaccessible area, such as in the lead-in 
area, the encryption key can be hidden from the user. 
If the disc-shaped record medium 101 has plural 

55 record layers, and the sector addresses of a record layer 
other than the data record layer of the disc-shaped 
record medium 101 is set so as to be decreased from, 
for example, (7fffffffh), the encryption key information 
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contained in the first sector of the record layer other than 
the data record layer on the record medium 101 can be 
specified by designating (7fffffffh) as the sector address 
information. 

As an example of the case in which special address- 
es are written in the sector address information, if the 
sector address numbers not present on the disc-shaped 
record medium 101, such as the numbers from 
(90000000h) to (Oeffffffh), are allocated to the following 
information items, a variety of information items can be 
handled as the encryption key information by sector ad- 
dresses in a unified form of representation. 

In such case, the key information from the usual 
sector is not read out, but the information written by bar 
codes, wobbling or ultraviolet rays, the identification in- 
formation proper to the recording/reproducing appara- 
tus or the destination information (Regional Code) rep- 
resenting the territory of the shipping destination, re- 
corded in, for example, an EE PROM 225 in the appara- 
tus shown in Fig.16, the information accumulated in a 
information accumulation unit 226, such as an IC card 
or a Personal Computer Card International Association 
(PCMCIA), connected to or enclosed in the apparatus, 
the information supplied via a communication interface 
227 from a communication device such as MODEM/ 
LAN, or the information from an external device, sup- 
plied from a keyboard 228 or a remote controlled trans- 
mission device 232 via a remote controlled reception 
unit 229, is taken out as the identification information. 

If, when the key storage site information is read out, 
it is designated in the sector address information as the 
above-mentioned sector address (90000000h) to use 
the information contained in the bar code BC recorded 
on the surface of the disc-shaped record medium 101 , 
a bar code reader 21 0 provided separately from the usu- 
al readout device is actuated for decoding the informa- 
tion from the reader 21 0 by a bar code decoder 233 and 
the decoded information is sent to the CPU 224 tor set- 
ting the key information in the decoder as previously ex- 
plained. 

If an interactive input device, such as keyboard 228, 
remote controlled transmitter 232 or remote controlled 
reception unit 229, is designated as the encryption key 
storage site, a step of prompting the user to enter the 
encryption key using an indication circuit 230 and a dis- 
play 231 enclosed in or connected to the apparatus 
needs to be provided directly before the step of reading 
out the key information. 

If such special sector address is used, the meaning 
proper to the information or the device can be accorded 
to the byte number information or the offset information 
for the key storage site information for absorbing differ- 
ences between the devices. If the encryption key infor- 
mation is designated to be read from the modem, the 
offset information may be used for designating the tele- 
phone number of the encryption key information distrib- 
utor. 

As another example of deciphering using the en- 



cryption key information, if there are a decoder A capa- 
ble of decoding from one sector to another and a decod- 
er B capable of decoding from one record medium to 
another, the operation of setting the encryption key in 

s the sector-based decoder A after reading out the en- 
cryption key from the decoder A may be carried out be- 
fore the operation of taking out the encryption key of the 
decoder B for further raising confidentiality of the en- 
cryption key of the decoder B. 

10 in the above description, plural encryption opera- 
tions are performed in the recording apparatus, and a 
plurality of associated decoders are provided in the re- 
producing apparatus. It is to be noted however that the 
present invention can be applied basically to an ar- 

15 rangement having a sole encryption operation and the 
associated decoder. 

With the above-described embodiment of the 
present invention, one or more arraying srte(s) for the 
encryption key information is provided in association 

20 with the decoder(s) of the apparatus, and a pointer spec- 
ifying such arraying site (key storage site information) is 
recorded on the record medium for enabling the arraying 
srte(s) of the encryption key information to be flexibfy 
designated at an optional site on the record medium. 

25 For example, it becomes possible to improve the confi- 
dentiality of the encryption key information by designat- 
ing the user inaccessible site as the encryption key stor- 
age site. In addition, if the optional identification infor- 
mation prescribed by the physical format is designated, 

30 or if a physical property of the record medium, such as 
a different record layer of a record medium having plural 
record layers, is designated, the deferent potential 
against unauthorized duplication can be increased. In 
addition, since plural encryption keys are be grouped in 

35 one sector, highspeed accessing becomes possible 
with respect to a large number of encryption keys. 

With the key information designated by the key stor- 
age site information, not only a data area on the record 
medium read out by usual readout means, but also the 

40 information recorded on the record medium by a differ- 
ent recording method may also be designated. In addi- 
tion, since the key information specified by the key stor- 
age site information can designate a site on the record 
medium, but also logical devices ancillary to the record- 

45 ing/reproducing apparatus, it becomes possible to des- 
ignate the internal information in the recording/repro- 
ducing apparatus, such as identification numbers or to 
cope with entry of the encryption key from external de- 
vices. 

so Also, the key information combination can be 
changed from one master disc for the record medium to 
another, so that the record medium can be easily fabri- 
cated in conformity to the intention of the master disc 
producer. For example, only a part of the key information 

55 may be used in order to exploit the characteristics of the 
decoders of the reproducing apparatus. 

Of course, such arraying method may be applied to 
a key information arraying in encryption techniques in 
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general. 

The deciphering operation in respective compo- 
nents ol Fig. 1 7 is now explained. 

The deciphering operation by the synchronization 
separation circuit 1 1 4 of Fig. 1 7 is performed by detect- s 
ing data in which the manner of using a plurality of, such 
as four, different sorts of the synchronization words, or 
the sites of using various synchronization words in the 
frame structure, are ciphered, or otherwise changed de- 
pending on the key information in accordance with the 
key information, in accordance with the key information, 
as explained in connection with Figs. 13 or 14. 

The deciphering operation by the demodulation cir- 
cuit 115 is performed in such a manner that 16 channel- 
bit data is sent from the synchronization separation cir- 
cuit 114 to a 16-8 conversion circuit 131 for conversion 
to 8-bit data, which is then sent to an ExOR gate 132 
associated with the ExOR gate 73 of Fig. 12 so as to be 
ExORed with the 8-bit key data from a terminal 1 33. This 
restores data corresponding to 8-bit data supplied to an 
input terminal 71 of Fig.12. The resulting data is then 
sent to the error correction decoding circuit 116. 

The error correction decoding circuit 116 performs 
an operation, which is reverse of the operation of the 
error correction encoding circuit of Fig. 10, by an ar- 
rangement shown in Fig.20. 

Referring to Fig.20, 1 70 bytes or 170 symbols of da- 
ta demodulated by the demodulation circuit 115 are 
grouped together and sent via a re-arraying circuit 142 
having an inverter 172a and a delay circuit 143 to a C1 
decoder 144 operating as a first decoder. Of the 
170-byte data supplied to the C1 decoder 144, 22 bytes 
represent the P and the Q parity data. The C1 decoder 
1 44 performs error correction and decoding using these 
parity data. The C1 decoder 144 outputs 170 byte data 
which is sent via a delay circuit 1 45 to a C2 decoder 1 46, 
where the 170 byte data is processed with error correc- 
tion and decoding before being sent via a delay circuit 
147 to a C3 decoder 148 operating as a third decoder. 
The delay circuit 1 47 and the C3 decoder 1 48 are similar 
to the delay circuit 143 and the C1 decoder 144. It is 
also possible to provide plural sets of the delay circuits 
and the C1 decoders. The C3 decoder 148 performs ul- 
timate error correction and decoding, so that 148-byte 
data free of parity data is taken out. The 1 48-byte data 
corresponds to the 148 byte data entering the C1 en- 
coder 52 of Fig. 10. 

If encryption by the presence or absence of the in- 
verter is performed in the inverters 57a in the re-arraying 
circuit 57 of the error correction encoding circuit of Fig- 
10, it becomes necessary to perform corresponding de- 
ciphering by inverters 142a within the re-arraying circuit 
142 of the error correction decoding circuit of Fig.20. Of 
course, the deciphering operation needs to be per- 
formed as a counterpart operation of the ciphering op- 
erations explained in connection with Fig.10. 

Fig.21 shows an illustrative arrangement of an error 
correction decoding circuit associated with the error cor- 



rection encoding circuit of Fig.11 . 

Referring to Fig.21 , a set of ExOR gates 151 is pro- 
vided on the input side of the inverters 142a of the re- 
arraying circuit 142 and on the input side of the delay 
circuit 1 43, in association with the set of the ExOR gates 
61 inserted on the output side of the inverters 57a in the 
re^arraying circuit 57 in Fig.11. Similarly, a set of ExOR 
gates 156 is provided on the output side of the C3 de- 
coder 148 in association with the set of the ExOR gates 

66 inserted on the input side of the C3 decoder 148. 

These sets of the ExOR gates 1 51 , 1 56 perform da- 
ta conversion for deciphering the data converted by the 
ExOR gates 61 , 66 of Fig.1 , respectively, and are made 
up of 170 8-bit ExOR gates and 148 8-bit ExOR gates, 
respectivery. Of course, if the set of ExOR gates 61 on 
the recording side shown in Fig. 11 perform data conver- 
sion corresponding to the key information on 148-byte 
information data excluding the parity data, the set of Ex- 
OR gates 151 are constituted by 148 8-bit ExOR gates. 

To an input terminal 152 of Fig.21 is supplied the 
170-bit key information, corresponding to the key infor- 
mation supplied to the terminal 62 of Fig. 1 1 . The 1 70-bit 
key information is then supplied via a D-latch circuit 1 53 
to each of 1 70 ExOR gates within the set of ExOR gates 
151. The D-latch circuit 153 is responsive to the 1-brt 
encryption control signal supplied to an enabling termi- 
nal 154 to send the 170-bit key information directly to 
the set of ExOR gates 151 or to set the 170 bits to "0". 
The set of ExOR gates 1 56 is similar to the set of ExOR 
gates 151 except having 148 ExOR gates and the 
148-bit key data similar to that supplied to the terminal 

67 of Fig.11. Thus, the 148-bit key information supplied 
to the terminal 157 is sent via a D-latch circuit 158 to 
1 48 ExOR gates in the set of ExOR gates 1 56, wh ile the 
D-latch circuit 1 58 is controlled by the encryption control 
signal at the enabling terminal 159 as to whether or not 
the 148-bit key information should all be set to zero. 

By employing the ExOR gates or the inverters of the 
error correction circuit, sophisticated encryption may be 
achieved in a simple manner. By controlling the number 
of the inverters, data of absolutely undecipherable level 
or data which become non-reproducible with worsening 
of the error states can be coped with responsive to the 
demand on the security level. That is, by controlling the 
number of the inverters or the ExOR gates, control may 
be managed in such a manner that reproduction be- 
comes feasible and unfeasible if the error state is good 
or bad, respectivery, while the absolutely non-reproduc- 
ible state, that is the state in which data recovery is im- 
possible if only error correction is resorted to, can be 
produced. The encryption key is formed by a large 
number of bits, such as more than one hundred bits for 
each site, as in the example shown in the drawing, thus 
improving data security. In addition, by forming the error 
correction encoding circuit or the error correction decod- 
ing circuit in an LSI or IC chip hardware, the circuits be- 
come difficultly accessible to the users in general, thus 
again improving data security. 
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The sector resolution circuit 117 performs even/odd 
dei interleaving, that is resolves interleaving of even- 
numbered bytes and odd-numbered bytes, if such inter- 
leaving has been performed by the sector forming circuit 
1 3 at the time of recording, as already explained in con- 
nection with Figs. 2 and 3. 

The header separation circuit 11B performs deci- 
phering, that is resolving the ciphering explained in con- 
nection with Figs.7 to 9, that is transposition of byte pat- 
terns of data sync for sector synchronization or changes 
in addresses or CRC, if such ciphering is performed by 
the header appendage circuit 1 5 at the time of recording. 

Fig. 22 shows an illustrative structure of a descram- 
bling circuit 119, to a terminal 161 of which digital data 
from the header separation circuit 110 of Fig. 17 is sup- 
plied. The digital data from the terminal 161 is descram- 
bled by a scrambler 1 63 configured as shown for exam- 
ple in Fig.4 and is outputted at an output terminal 164. 
A generating polynomial 165 and pre-set values (initial 
values) 1 65 for the scrambler 1 63 are varied responsive 
to the encryption key information from a verification 
mechanism 171 for effectuating deciphering. The verifi- 
cation mechanism 171 generates the encryption key in- 
formation, based on the contents of the copying infor- 
mation 46 of the header information 167, the proper 
identification information 172 proper to the record me- 
dium or to the reproducing apparatus, the common pro- 
ducer or seller identification information 173, or the ex- 
ternal identification information 174 supplied from out- 
side, for controlling the generating polynomial 165 or the 
pre-set values 1 66 responsive to the key information. 

The information as to which of the circuits 114 to 
119 is in need of deciphering also constitutes the en- 
cryption key information, as explained previously. The 
encryption key information may be switched at a pre-set 
period, for example, at a sector period. The switching/ 
non-switching or the switching period may also consti- 
tute the key for encryption, thus enhancing encryption 
difficulties. 

A second embodiment of the present invention will 
now be explained. 

The present second embodiment represents partial 
modification of the first embodiment and has an overall 
structure similar to that explained above in connection 
with Fig. 1. The modified portions of the circuits 13 to 18 
of Fig.1 will now be explained. 

The sector forming circuit 13 of Fig.1 may be con- 
stituted similarly to the corresponding circuit of the first 
embodiment. However, the scrambling circuit 14 is con- 
figured as shown in Fig. 23. 

In the scrambling circuit 14, shown in Fig.23, data 
from the sector forming circuit 1 3 of Fig.1 are entered in 
the so-called LSB first sequence, that is in a sequence 
in which the tawermost bit (LSB) is entered temporally 
first. A 15-bit shift register 14a for scrambling is associ- 
ated with an ExOR gate 1 4b for feedback in accordance 
with the generating polynomial x 15 + x 4 + 1 . Pre-set val- 
ues or initial values as shown in Fig. 24 are set in the 



15- bit shift register 14a. The selection numbers for the 
pre-set values of Fig.24 are associated with, for exam- 
ple, the lower four bits of the sector addresses so that 
the pre-set values are switched on the sector basis. Out- 

s put data of the shift register 1 4a and input data from a 
terminal 35 are ExORed by the ExOR circuit 1 4c, an out- 
put of which is sent via a terminal 14d to the header ap- 
pendage circuit 15 of Fig.1. 

The pre-set values (initial values) may be changed 

10 responsive to the key information, such as the pre-set 
identification number. For example, pre-set logical op- 
erations may be performed on the byte values of the 

16- byte identification information and the pre-set values 
of the table in Fig.24. The identification information may 

is include the identification information proper to the 
record medium, the producer identification information, 
seller identification information, the identification infor- 
mation proper to the recording apparatus or the encod- 
er, or the identification information supplied from out- 

20 side, alone or in combination. 

The sector format of the present second embodi- 
ment may be configured as shown for example in Fig.25. 

Referring to Fig.25, each sector is made up of 12 
172-byte rows, totalling at 2064 bytes, of which 2048 

25 bytes represent main data. At the leading end of the first 
row of the 1 2 rows are arrayed a 4-byte identification 
(ID) data, a 2 -byte ID error detection (IED) code and a 
6-byte reserve (RES) data, in this order. At the trailing 
end of the last row is arrayed a 4-byte error detection 

30 code (EDC). 

Of the 4 bytes of the ID data, the first byte (bits b31 
to b24) on the MSB side represents the sector informa- 
tion, with the remaining three bytes (bits b23 to bO) rep- 
resenting the sector numbers, as shown in Fig.26. The 

3S sector information is made up of a 1-bit sector format 
type, a 1 -bit tracking method, a 1-bit reflectance, a 1 -bit 
spare, a 2-bit area type and a 2-bit layer number, looking 
from the MSB side. 

The header appendage circuit 15 of Fig.1 may per- 

40 form transposition, which is bit-based scrambling, on 24 
bits of the sector number in the ID data, for example, 
depending on the key information, by way of performing 
encryption. Alternatively, the generating polynomial for 
2-byte ID error detection (IED) code or the generating 

45 polynomial for 4-byte error detection code (EDC) may 
be modified depending on the key information or proc- 
essed with the key information with logical operations 
by way of performing encryption. 

The error correction coding circuit 16 of Fig.1 may 

so be configured as shown in Fig.27. For encoding, the 
product code or the block code as shown in Fig.28 is 
employed. 

Referring to Fig.27, data from the header append- 
age circuit 15 of Fig.1 is supplied to an input terminal 
ss 310 and thence supplied to a PO encoder 31 1 as a first 
encoder. The input data to the PO encoder 311 is data 
of 172 bytes by 192 rows, or Bq 0 to B 101 171 . as shown 
in Fig.28. The PO encoder 311 appends the 16 bytes of 
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the outer code (PO) of RS (208,192,17) as the Reed 
Solomon (RS) code to each of the 172 columns each 
made up of 1 92 bytes of data. Output data of the PO 
encoder 311 are sent via a data conversion circuit 312 
for encryption to an interleaving circuit 31 3 for interleav- 
ing and thence to a PO encoder 314. The PI encoder 
314 appends 10 bytes of the inner code (PI) of RS 
(182,172,11) to 172-byte data of each of 208 rows of 
1 72 bytes by 208 rows of data resulting from appendage 
of the PO parity data. Thus the PI encoder 314 outputs 
182 bytes by 208 rows of data, which is taken out at an 
output terminal 316 via a data conversion circuit 315 for 
encryption such as one described previously. 

Since the PO encoder 31 1 appends 16-byte PO par- 
ity to 192-byte input data of each column to output 208 
bytes of data, the data conversion circuit 312 can per- 
form the above-described data conversion on the 
16-byte parity or the 208 bytes of the data in its entirety 
by way of performing encryption. Also, since the PI en- 
coder 314 appends 10-byte PI parity to 172-byte input 
data of each row to output 182 bytes of data, the data 
conversion circuit 31 5 can perform the above-described 
data conversion on the 10-byte parity or the 182 bytes 
of the data in its entirety by way of performing encryp- 
tion. 

Specifically, the inverters may be arrayed at pre-set 
positions, data inversion may be made selectively de- 
pending on the key information by the sets of the ExOR 
gates, or AND, OR, NAND or NOR gates may be used 
for data conversion, as shown and explained in connec- 
tion with in Figs. 1 0 and 11 . In place of performing logical 
operations on the 8-bit based data with the 1-bit key in- 
formation or key data, logical operations may be per- 
formed on 8-bit information data and 8-bit key data. 
Each bit of the 8 bits of the information data word may 
be associated with an AND, OR, ExOR, NAND, NOR or 
inverter circuits. If the AND. OR, ExOR, NAND, NOR or 
the inverter circuits are used in combination, the combi- 
nation itself may be used as the key for encryption. Of 
course, a variety of encryption techniques such as con- 
version by shift registers or function operations may also 
be used abne or in combination. 

The 182 bytes by 208 rows of the error-corrected 
and encoded data are interleaved as to rows and clas- 
sified into 1 6 groups each made up of 1 3 rows, with each 
group being associated with a recording sector. Each 
sector is made up of 1 82 bytes by 1 3 rows, totalling 2366 
bytes, which are modulated, and two synchronization 
codes SY per row are appended to the modulated data, 
as shown in Fig.29. For modulation, 8-16 conversion is 
used, as in the first embodiment previously explained. 
Each row is divided into two sync frames, each sync 
frame being made up of a 32 channel bit synchronization 
code SY and a 1456 channel bit data portion. Fig.29 
shows a one-sector structure produced on modulation 
and synchronization appendage. The 38688 channel 
bits for one sector shown in Fig.29 corresponds to 241 8 
bytes prior to modulation. 



The modulated output signal of Fig.29 uses eight 
sorts of the synchronization codes SY0 to SY7. Depend- 
ing on the states of the above-mentioned 8 to 16 con- 
version, these synchronization codes SY0 to SY7 as- 
5 sume the synchronization pattern of Fig.30A for states 
1 and 2, while assuming the synchronization pattern of 
Fig.30B for states 3 and 4. 

Selection of these 8 sorts of the synchronization 
codes SY0 to SY7 may be varied, depending on the 3-bit 
key information, using the circuit shown for example in 
Fig. 31, by way of performing encryption. That is, each 
of three bits specifying the above eight sorts of the syn- 
chronization codes SY0 to SY7 is ExORed with each of 
three bit of the key information 322 by three ExOR gates 
323, 324, 325 for providing a new synchronization code 
designating data 326. This modifies the manner of using 
the synchronization codes in the above frame structure 
or the use position of the various synchronization codes 
in the frame structure by way of performing encryption. 
Of course, the three bit data may be transposed or sub- 
stituted depending on the key information. It is also pos- 
sible to effect conversion by shift registers or by func- 
tions. 

The effect of the second embodiment of the present 
invention is also similar to that of the second embodi- 
ment described above. 

For the recording side structure of the above-de- 
scribed second embodiment of the present invention, 
the basic structure of the reproducing side is as ex- 
plained in connection with Fig. 17. That is, the reverse 
operations modified in association with the points of 
change shown in the second embodiment are per- 
formed. For example, the reverse operation of the error 
correction encoding shown in Fig.27 may be implement- 
ed by an error correction decoding circuit shown in Fig. 
32. 

To an input terminal 330 of Fig.32 are supplied data 
of 182 bytes by 208 rows of the product code of Fig.28 
corresponding to an output of an output terminal 316 of 
Fig.27. The data entering the input terminal 330 are sent 
to an inverse data conversion circuit 331 where the op- 
eration which is a reverse of the operation by the data 
conversion circuit 315 of Fig.27 is performerd. Output 
data of the inverse data conversion circuit 331 is sent to 
a PI (inner code) decoder 332 where a decoding oper- 
ation which is the reverse of the operation by the PI en- 
coder 314 of Fig.27, that is error correction coding em- 
ploying the PI code, is performed to give data of 172 
bytes by 208 rows as shown in Fig.28. Output data of 
the PI decoder 332 is sent to a de interleaving circuit 333 
where the operation which is the reverse of the inter- 
leaving performed by the interleaving circuit 31 3 is per- 
formed. The deinterleaved data is sent to an inverse da- 
ta conversion circuit 334 where an operation which is 
the reverse of the operation by he data conversion cir- 
cuit 31 2 of Fig.27 is performed. The resulting data is sent 
to a PO (outer code) decoder 335 where a decoding op- 
eration which is the reverse of the operation by the PO 



15 



20 



25 



30 



35 



40 



45 



SO 



12 



23 



EP 0 756 279 A2 



24 



5. A signal record medium readable by a reproducing 
apparatus, said record medium having the a repro- 
ducing apparatus readable record signal thereon, 
the record signal including a ciphered signal ob- 
s tained on performing at least one ciphering opera- 
tion and the key storage site information specifying 
an arraying site of at least one key information item 
used for deciphering the ciphered signal. 

10 6. The signal record medium as claimed in claim 5 
wherein the site of recording of the key storage site 
information is a particular user inaccessible site. 

7. The signal record medium as claimed in claim 5 
is wherein the key storage site information is ciphered 
and wherein the record signal further including the 
key information for ciphering the key storage site 
information. 

20 a A signal reproducing apparatus for reproducing a 
ciphered signal from a signal record medium having 
recorded thereon the ciphered signal obtained on 
performing at least one ciphering operation and the 
key storage site information specifying an arraying 

25 site for at least one key information item used for 
deciphering the ciphered signal, comprising: 



encoder 311, that is the error correction employing the 
PO code is performed. The resulting data, that is the 
original 172 bytes by 192 rows of data, is taken out at 
an output terminal 336. If the key information is used for 
data conversion by the data conversion circuits 31 2, 31 5 
of Fig.27, the key information supplied to the terminals 
318, 319 may be supplied to terminals 339, 338 of the 
inverse data conversion circuits 334, 331 for performing 
inverse data conversion depending on the key informa- 
tion. 

The effect of the second embodiment of the present 
invention is similar to that of the above-described first 
embodiment. 

The present invention is not limited to the above- 
described merely illustrative embodiments. For exam- 
ple, data conversion may be made by bit addition or data 
conversion by a variety of logical operations, in place of 
by inverters or ExOR gates as described above, \ferious 
encryption techniques, such as data substitution, trans- 
position or transformation by a shift register or by vari- 
ous function processing, responsive to the encryption 
key information, may also be used atone or in combina- 
tion. 



Claims 

1. A signal recording apparatus for recording a ci- 
phered signal on a signal record medium, compris- 
ing: 

at least one signal ciphering means for cipher- 
ing an input signal; and 
key storage site information entering means for 
entering the key storage site information spec- 
ifying an arraying site for the encryption key in- 
formation used in said at least one signal ci- 
phering means. 

2. The signal recording apparatus as claimed in claim 
1 wherein the key storage site information is record- 
ed in a particular user inaccessible portion on the 
signal record medium. 

3. The signal recording apparatus as claimed in claim 
1 wherein the key information is arrayed on the sig- 
nal record medium or on sites other than those on 
the signal record medium. 

4. The signal recording apparatus as claimed in claim 
1 further comprising key information ciphering 
means for ciphering the key information and stor- 
age information specifying information entering 
means for entering the storage information specify- 
ing information specifying the arraying site of the 
encryption key information used in said key infor- 
mation ciphering means. 



readout means for reading out the ciphered sig- 
nal and the key storage site information from 
30 said signal record medium; and 

decoding means for deciphering the ciphered 
signal using the key information stored on the 
site specified by said key storage site informa- 
tion. 

35 

9. The signal reproducing apparatus as claimed in 
claim 8 wherein said readout means reads out the 
key storage site information recorded at a particular 
user inaccessible site on the signal record medium. 

40 

10. The signal reproducing apparatus as claimed in 
claim 8 further comprising take-out means for taking 
out the key information arrayed at a site other than 
sites on the signal record medium. 

45 

11. The signal reproducing apparatus as claimed in 
claim 8 wherein the key information is ciphered and 
wherein said readout means reads out the informa- 
tion specifying the arraying site for the key informa- 

50 tion used for ciphering the key information. 
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